Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
File: pmnxwhNwxE39EOKvaIyMTg6hKVU.mft (raw, json)
Hash identifier: p5C7P+qJGM7Fg1raWCjxjlxDfc4wAgdOT/32HvOM1/U=
Subject key identifier: 68:BC:B7:F5:88:7B:A6:58:49:EC:9C:2D:05:33:A5:1C:1C:3E:F6:65
Authority key identifier: A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
Certificate issuer: /CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Certificate serial: 019D389C39943ED2D04BCCD7F2C80371BBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
Manifest number: 10D8
Signing time: Sun 29 Mar 2026 08:00:55 +0000
Manifest this update: Sun 29 Mar 2026 08:00:55 +0000
Manifest next update: Mon 30 Mar 2026 08:00:55 +0000
Files and hashes: 1: pmnxwhNwxE39EOKvaIyMTg6hKVU.crl (hash: g6WnT8qaDnMnPUE5Gu5o2Cnt5ZWYpV8tvrMEeg/4tT4=)
2: xHv2_HdEJG5Cfvg9tYmqVThQtwc.roa (hash: Nxypi5IV+neWqZvzXksjBejqnOVHDrNcZpixogm0gqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:39:94:3e:d2:d0:4b:cc:d7:f2:c8:03:71:bb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Validity
Not Before: Mar 29 08:00:55 2026 GMT
Not After : Mar 30 08:00:55 2026 GMT
Subject: CN=68bcb7f5887ba65849ec9c2d0533a51c1c3ef665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:3d:b6:12:d8:86:64:3e:9f:57:62:ed:6b:
39:f6:98:c2:e5:64:24:bc:fd:15:bc:e1:66:dd:d9:
4b:24:86:77:b0:f1:2a:11:7e:32:a8:d2:a9:97:5d:
61:e2:19:7b:d5:fd:08:9b:cf:58:c5:cf:46:74:fb:
93:3f:16:35:39:57:27:f5:19:15:91:3a:8f:a3:14:
99:60:87:8d:17:50:54:59:f4:9f:e4:89:6a:84:d3:
e4:5a:67:39:26:5c:ea:1f:bb:1c:c5:5c:79:96:7b:
7d:d6:a2:4d:8b:e4:b1:dc:e0:96:1c:81:ed:43:87:
f0:56:0e:80:8f:45:6d:4c:64:83:a5:d8:5f:1b:2b:
cb:79:ae:ae:d7:12:8e:23:48:39:e4:c3:0a:50:f7:
3f:1f:20:9b:41:d2:b4:1f:46:0b:98:27:8e:73:35:
e0:1f:e5:97:8b:9c:3d:e3:dc:4e:56:17:89:2b:6b:
b9:2c:d4:35:de:59:58:6a:af:05:ee:53:a0:12:61:
2d:27:f3:cb:5b:62:df:81:9e:99:e7:ae:a3:7c:fa:
2e:a6:d9:e3:82:cf:8e:4f:ec:f3:99:f3:b7:ef:35:
55:86:09:ee:77:4d:5f:e1:58:bf:b6:52:3e:63:dd:
0e:28:53:65:ee:f8:d8:46:a9:83:e2:17:50:d8:bc:
18:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BC:B7:F5:88:7B:A6:58:49:EC:9C:2D:05:33:A5:1C:1C:3E:F6:65
X509v3 Authority Key Identifier:
keyid:A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:08:ad:d8:32:cb:08:f7:5f:af:56:f5:81:ef:54:36:c4:ff:
ae:47:c1:79:d7:f5:81:88:27:89:47:ba:38:84:7b:77:fb:e1:
71:23:75:86:ca:68:23:91:10:5a:d7:4c:5d:db:a8:c1:2c:13:
7b:40:30:84:ff:11:16:82:89:3e:5d:3e:19:e9:dd:d1:68:21:
13:d4:91:75:58:08:18:c2:93:8d:da:2c:99:fa:68:99:ee:ba:
82:28:75:fb:06:14:e0:36:2a:ff:7b:81:62:a7:8e:56:a5:c1:
d4:80:73:54:ad:b2:ad:91:e2:6f:70:23:77:d9:db:ec:ca:6d:
40:f6:bb:c1:f2:18:29:22:28:f1:6c:33:ed:3b:2d:6a:9b:40:
43:07:e0:35:ff:60:32:81:21:d8:9b:6f:b4:16:fd:d2:01:46:
fe:11:48:05:8a:89:6e:39:20:45:83:34:bd:f8:72:e4:10:b2:
6a:e7:c4:1f:24:56:42:b9:2b:07:f5:cc:04:21:68:e0:d2:e7:
78:4d:3a:64:98:87:7c:3f:1f:7c:54:fc:12:8e:cf:b3:ac:03:
f2:b4:d6:ef:26:8d:75:54:2d:98:6e:8d:14:a1:68:63:4a:62:
3e:25:aa:25:82:69:86:b2:00:2c:3d:57:c0:b2:8c:23:70:3f:
e2:52:48:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:16 2026 by rpki-client